VULNERABILITY INTELLIGENCE

CVE-2026-58425

CVSS score4.3 MEDIUM

EPSS probability0.33%

CISA KEVNot currently listed

Published2026-08-13

Last modified2026-08-26

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)